CVE-2012-6151

Published: 13 December 2013

Net-SNMP 5.7.1 and earlier, when AgentX is registering to handle a MIB and processing GETNEXT requests, allows remote attackers to cause a denial of service (crash or infinite loop, CPU consumption, and hang) by causing the AgentX subagent to timeout.

Status

Notes

upstream patch breaks ABI

References

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-6151
• https://ubuntu.com/security/notices/USN-2166-1
• NVD
• Launchpad
• Debian

Bugs

• http://sourceforge.net/p/net-snmp/bugs/2411/
• http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=731625
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-6151